Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25/09/2024, 11:53
General
-
Target
f5f4060c3f83f94db37c9d9f84339b3c_JaffaCakes118.exe
-
Size
87KB
-
MD5
f5f4060c3f83f94db37c9d9f84339b3c
-
SHA1
6ff9ee38255397e8dc87176d46fff9146f35edbb
-
SHA256
c08ca412cb76e29222488b0719b9ae8ec769406796d5fbdc479eb6fa94b4f170
-
SHA512
b9cfa151fce4ad85fddc37ac526e70ef3d599185f9f9c7a72765f138645ef1a66e628d222add831ce6cb77ae1cf5cdd29f0fe922e840927ddeea4e6da0706da7
-
SSDEEP
1536:bHa5mNCAT1V7U/X7Ah+nuceJH+kVx233LFpf3bgJbSZqYhcpEy3:b1dT77okE3aef3LFpTgoZfMEy
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5f4060c3f83f94db37c9d9f84339b3c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f5f4060c3f83f94db37c9d9f84339b3c_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x470 0x2cc1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB
-
Filesize
556KB